The Download Manager in Adobe Acrobat Professional and Reader 8.1.2...
Vulnerability Description
The Download Manager in Adobe Acrobat Professional and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a crafted PDF document that calls an AcroJS function with a long string argument, triggering heap corruption.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-4817
Credits & Attribution
No credits recorded in the NVD database.
References
- http://secunia.com/advisories/32700
- http://osvdb.org/49541
- http://download.oracle.com/sunalerts/1019937.1.html
- http://secunia.com/advisories/32872
- http://www.adobe.com/support/security/bulletins/apsb08-19.html
- http://www.vupen.com/english/advisories/2009/0098
- http://www.us-cert.gov/cas/techalerts/TA08-309A.html
- http://www.securitytracker.com/id?1021140
- http://www.vupen.com/english/advisories/2008/3001
- http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html
- http://www.redhat.com/support/errata/RHSA-2008-0974.html
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=756
More from adobe
View All →Affected Vendor
adobe
View all reports →Affected Software
Timeline
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.